(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 
International Bureau 

(43) International Publication Date 
3 January 2002 (03.01.2002) 





IIIII1II1IDIII1II 




PCT 



(10) International Publication Number 

WO 02/01902 Al 



(51) International Patent Classification 7 : 



H04Q 7/38 



(21) International Application Number: PCT/EPOO/06094 



(22) International Filing Date: 29 June 2000 (29.06.2000) 



(25) Filing Language: 



(26) Publication Language: 



English 



English 



(71) Applicant (for all designated States except US): NOKIA 
CORPORATION [FI/FI]; Keilalahdcntic 4, FIN-02150 
Espoo (FT). 

(72) Inventors; and 

(75) Inventors/Applicants (for US only): HULKKONEN, 
Tony rFI/FIl; Porvoonkatu 1 F 214, FTN-00510 Helsinki 
(FI). BACK, Juha [FI/FT); Kulosaarcnpuistotie 44 B 22, 
FIN-00570 Helsinki (FI). 



(74) Agents: LESON, Thomas, Johannes, Alois et al.; 
Tiedtke-Buhling-Kinne, Bavariaring 4, D-80336 Munich 
(DE). 

(81) Designated States (national): AE, AG, AU AM, AT, AU, 
AZ, BA, BB, BG, BR, BY, BZ, CA, CH, CN, CR, CU, CZ, 
DE, DK, DM, DZ, EE, ES, FI, GB, GD, GE, GH, GM, HR, 
HU, ID, It, IN, IS, JP, KE, KG, KP, KR, KZ, LC, LK, LR, 
LS, LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, MZ, 
NO, NZ, PL, PT, RO, RU, SD, SE, SG, SI, SK, SL, TJ, TM, 
TR, IT, TZ, UA, UG, US, UZ, VN, YU, ZA, ZW. 

(84) Designated States (regional): ARIPO patent (GH, GM, 
KE, LS, MW, MZ, SD, SL, SZ, TZ, UG, ZW), Eurasian 
patent (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), European 
patent (AT, BH, CH, CY, DE, DK, KS, FI, FR, GB, GR, IE, 
IT, LU, MC, NL, PT, SE), OAP1 patent (BF, BJ, CF, CG, 
CI, CM, GA, GN, GW, ML, MR, NE, SN, TD, TG). 

Published: 

— with international search report 



[Continued on next page] 



(54) Title: OPERATOR FORCED INTER -SYSTEM HANDOVER 



I . Service Request 

(speech) i 
I 





2. Seryice Request (speech) 



8. handover 
Command 




UMTS RAN 



J4. Relocation Required 



3, Assignment Request (Gfcl 
RAN preferred) J 

7. Relocation Command 



Dual mode UE 



6. Handover Request 
Ack 



< 

© 
O 



9. Access net* 
radio resources 

I 
I 
I 
I 
I 
I 

» Radio Access Network 
i 





T - 








m 










Li Li 
















■ 


r 




• 



MSC/VLR 



5. Handover Request 

l 
i 
I 



GSM BSS 



Core Network 



(57) Abstract: A communication network system is disclosed, which comprises at least two different types of radio access networks 
attached to a core network. In the network system, a subscriber communicates via a first radio access network with the core network 
which forces handover of the subscriber to another type of radio access network on the basis of operator specific criteria. 



WO 02/01902 Al 




For two-letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations " appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



WO 02/01902 



PCT/EP00/06094 



- 1 - 

TITLE OF THE INVENTION 

OPERATOR FORCED INTER-SYSTEM HANDOVER 

5 FIELD OF THE INVENTION 

The present invention relates to communication network 
systems which utilize at least two different types of radio 
access networks which are attached to a core network. 

10 

BACKGROUND OF THE INVENTION 

Considering a multi mode User Entity UE capable of 
communicating with two or more different types of radio 
15 access networks, for example GSM (Global System for Mobile 
communication) and UMTS (Universal Mobile Telecommunication 
Service), in IDLE state, the dual mode GSM/UMTS UE performs 
network selection as follows: 

20 1. Try to select the last registered PLMN (Public Land 

Mobile Network) , 

2. Try to select the home PLMN, 

3. Try to select a PLMN specified in the (U)SIM ((UMTS) 
Subscriber Identity Module) PLMN selector list, 

25 4. Try to select any other PLMN. 

After that, the Radio Access Network RAN (e.g. GSM RAN or 
UMTS RAN) and a cell are selected based on the signal 
strength. In other words, there is no preference of either 
30 RAN type over the other. After the UE has camped to a 
particular cell, it performs a registration to the PLMN. 
Whenever the user requests service from the network, it is 
initiated via the camped cell in the selected RAN . 

35 When a UE is in ACTIVE state, e.g. the user has an ongoing 
call, the radio network controller in the respective RAN and 
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the Core Network CN take care of the user's mobility by means 
of soft and hard handovers. In current mobile communication 
networks, a handover decision algorithm is located in a radio 
network controller of the respective radio access network, 
5 and it is not standardized in 3GPP (Third Generation 

Partnership Project) or ETSI (European Telecommunications 
Standards Institute), i.e. it is proprietary. The UE has no 
control over the type of radio access network via which the 
service is provided. 

10 

Moreover, current 3GPP and ETSI specifications do not provide 
any tools for an operator operating a GSM/UMTS network, for 
example, which enable the usage of either of them over the 
other . 

15 

However, operators have indicated that they need means to 
control what type of radio access network users are using. 
Control over the used radio access system type becomes even 
more necessary, when new radio access systems are introduced 
20 to current wireless communication systems, for example BRAN 
(Broadband Radio Access Networks) and GERAN, and integration 
with other access types, e.g. WLAN (Wireless Local Area 
Network) , becomes reality. 

25 Up to now, merely a mechanism has been presented, which is a 
parameter in a Channel Type Information Element in Base 
Station System Management Application Part protocol and can 
be used to hand over a connection from GSM to UMTS. 

30 SUMMARY OF THE INVENTION 

It is an object of the present invention to provide a 
communication network system and a method, realizing an 
operator forced handover to another type of radio access 
35 network. 
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According to the present invention, this object is achieved 
by a communication network system which comprises at least 
two different types of radio access networks attached to a 
core network. In the network system, a subscriber 
5 communicates via a first radio access network with the core 
network, the core network forcing handover of the subscriber 
to another type of radio access network on the basis of 
operator specific criteria. 



10 Moreover, the above-mentioned object is achieved by a method 
of handing over a subscriber communicating via a first radio 
access network with a core network to another type of radio 
access network, the radio access networks being attached to 
the core network in a communication network system comprising 

15 at least two different types of radio access networks, 

wherein the handover of the subscriber to the other type of 
radio access network is forced by the core network on the 
basis of operator specific criteria. 

20 According to an embodiment of the present invention, the core 
network indicates that a handover is needed to the other type 
of radio access network in an assignment request message sent 
to the first radio access network. This is needed in case the 
user equipment requests a service via a radio access network 

25 type which is not the preferred one from the service 

provider's point of view. I.e. the operator wants to provide 
the requested service via another type of radio' access 
network. 



30 Furthermore, according to another embodiment, the core 

network indicates the first type of radio access network as a 
preferred radio access network in a handover request message 
sent to the other radio access network. This is needed if a 
handover is performed from the preferred radio access 

35 network type to another radio access network type which is ' 
not optimal to provide the service from the service 
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provider's point of view. It enables the handover to be 
performed to the preferred type of radio access network when 
it becomes available (e.g. due to coverage reasons) . 

5 According to the present invention, the operator specific 
criteria may comprise a requested service, subscriber's 
identity, subscriber's location and/or a required security 
level. 

10 The core network analyzes the subscriber's identity upon 
receiving a service request from the first radio access 
network and forces a handover to the other type of radio 
access network on the basis of the analysis result. This 
enables the service provider to provide the best possible 

15 service for its own subscribers, e.g. in terms of quality of 
service. 

According to an embodiment, allowed radio access network 
types may be specified as subscriber parameters in a 
20 subscriber database and transmitted to the core network. This 
enables a user and/or the service provider to indicate to the 
visited network the type of radio access network which 
should be used to provide service for a particular 
subscriber . 

25 

Moreover, according to an embodiment, the core network 
indicates location information and a target radio access 
network type in an assignment request message sent to the 
first radio access network. This enables the network system 
30 to control the type of radio access network used to provide 
the service based on location. This can be used e.g. to 
handover some of the users from UMTS access to GSM in an area 
where a limited capacity is available in UMTS band. 



35 According to another embodiment, the core network transmits 
location information and a type of target radio access 
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network to the first radio access network at any time during 
an active connection. This provides more flexibility for the 
control of handover, since the required information does not 
necessarily have to be sent at the connection establishment. 

5 

Furthermore, the core network analyzes the required security 
level of a requested service and forces handover on the basis 
of the analysis result. In this context, a set of permitted 

10 security algorithms may be specified in a subscriber database 
and transmitted to the core network. This allows the user to 
be sure that at least the minimum required security level is 
applied for his/her services. E.g. if a user requests a 
service which requires higher security level than the one 

15 he/she is currently using, an inter-system handover would be 
performed if the serving radio access network can not 
provide a required security level. 

According to the present invention, by minor changes to open 
20 interfaces, the operator gets a maximum flexibility to 
control the access to different types of radio access 
networks. In particular, a set of tools is introduced for an 
operator to control who (subscriber 1 s identity ) , for what 
(services), where (location) uses a particular type of radio 
25 access network in his network system. 

■ 

In the following, the present invention will be described by 
way of preferred embodiments thereof with reference to the 
accompanying drawings. 

30 

BRIEF DESCRIPTION OF THE DRAWINGS 



Fig. 1 shows a schematic diagram of a service based forced 
inter-system handover. 



WO 02/01902 



PCT/EP00/06094 



- 6 - 

Fig. 2 shows a schematic diagram of a "back to UMTS when UMTS 
becomes available" handover. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The basic idea of the present invention is to allow the core 
network to get control over the radio access network type 
which is used to provide service to different subscribers. 

10 This invention does not set any predefined preference for any 
radio access network type. The described mechanisms and 
principles are applicable to any kind of radio access 
networks, e.g. WLAN, UMTS, BRAN, GSM, GERAN, IS-136, etc. 

15 Besides handovers due to the movement of terminal equipment 
and for traffic balancing reasons, operators ask for the 
possibility to trigger a handover between two different types 
of radio access networks, i.e. an inter-system handover, on 

* 

the basis of other issues. According to the present 
20 invention, the following forced inter-system handover types 
and examples of their implementation in a mobile 
communication network system are described: 

1. Handover based on the requested service 

25 

For example,, while roaming via UMTS radio access, a user may 
request a simple speech service from the network. At the 
connection establishment, the user's connection can be handed 
over to the GSM radio access network where the requested 
30 service can be provided and the capacity of the UMTS band can 
be dedicated preferably to packet data services. 

2. Handover based on the identity of the subscriber or 
subscriber's home network 



35 
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At a service request, the core network can analyze 
subscriber's identity, for example IMSI in GSM and UTMS, to 
find out whether the subscriber is operator's "own" 
subscriber or a visiting subscriber. Based on the operator 
5 specific criteria, the core network can indicate in an 

assignment request that the connection is to be handed over 
to another radio access network type. Furthermore, allowed 
radio access network types can be specified as subscriber 
parameters in the HLR database and VLR-HLR interface (Visitor 
10 Location Register-Home Location Register interface) . This 

allows the operator to control the access to different radio 
access network types at the level of individual subscribers. 

For example, an operator can give preference to own 
15 subscribers to access the UMTS access network, and the 

roaming subscribers are handed over to the GSM radio access 
network. 

3, Handover based on the location of the subscriber 

20 

There are two ways to implement this functionality: 

- the location information and the target radio access 
network type are indicated in the Assignment Request and 
Handover Request messages transmitted by the core network, 

25 and/or 

- a procedure to be used between the core network and 
the radio access network, e.g. in Iu- and A-interface, is 

* 

introduced, which conveys the required information to the 
serving radio access network. 

30 

For example, when a subscriber enters some particular LSA 
(Localized Service Area) or geographical area, the 
subscriber's connection is handed over to a predefined radio 
access network. 
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The added functionality introduced by the procedure to be 
used between the core network and the radio access network is 
that the necessary information about the target network does 
not have to be sent at the connection establishment or 
5 handover. The needed information can be sent at any time 
during an active connection. 

4. Handover based on the required security level 

10 In the simplest scheme the serving core network entity, e.g. 
MSC/VLR or SGSN (Serving GPRS Support Node), analyses the 
requested service and makes a decision whether the currently 
used security level is acceptable or not. 

15 For example, in case of establishing a data connection for 
transfer of sensitive data, the handover to corporate WLAN 
may be more preferred than using UMTS. 

5. Handover based on a combination of the above criteria 

20 

For example, the speech service is provided for roaming users 
only via GSM radio access. Therefore, when the connection is 
established via UMTS RAN, in case the subscriber is a 
visiting one, the connection is handed over to GSM. 

25 

The criteria used for enforcing handover are not restricted 

a 

■ 

to those explained above. 

In the following, the technical implementation of the above 
30 explained criteria will be described with respect to Figs. 1 

« 

and 2. ' -_. 

Fig. 1 shows a realization of an operator forced handover 
based on the requested service. 
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Before the service request is sent by a User Entity UE, a 
core network (here MSC/VLR) has identified and authenticated 
the user and potentially started ciphering at a radio 
interface . 

5 

In communication 1 from the UE to a first radio access 
network UMTS RAN, the UE camped on a UMTS cell requests a 
certain service from the network, for example a basic speech 
service. In communication 2, the Service Request is forwarded 
10 by the radio access network UMTS RAN to the core network. The 
UMTS RAN identifies that the UE is a dual mode GSM/UMTS 
terminal and may instruct the UE to perform measurements on 
GSM neighbor cells. 

15 The core network represented by MSC/VLR analyses the 

requested service and initiates a radio channel assignment 
procedure towards UMTS RAN (communication 3) . Based on 
operator specific criteria, the Assignment Request contains 
an indication that the connection should be handed over to 

20 another type of radio access network, in this case to GSM. 
The criteria for the handover enforced by the core network 
here is that a simple speech service is requested and the 
requested service can be provided via GSM. If there is GSM 
coverage in that particular area in which the UE is currently 

25 located and the measurement reports provided by the UE allow 
the handover, the serving UMTS RAN initiates an inter-system 
handover by sending a Relocation Required message 
(communication 4) to the MSC/VLR. It is to be noted that, if 
there is currently no GSM coverage or the UE has not sent any 

30 measurement reports, the serving UMTS RAN may delay the 
handover and reserve radio resources for the connection. 

In communication 5, the MSC/VLR sends a Handover Request to a 
Radio Network Controller (RNC) of the target RAN, in the 
35 present case to GSM BSS (GSM Base Station System) . After the 
required radio resources have been reserved the target RAN 



■ 
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(GSM BSS) sends a Handover Request Acknowledge message to the 
MSC/VLR (communication 6) . Then, in communication 7, the 
MSC/VLR sends a Relocation Command to the serving UMTS RAN. 
The serving UMTS RAN sends an L3-RRC (Layer 3 - Radio 
5 Resource Control) Inter-System Handover Command to the UE 
(communication 8) , and, subsequently, the UE accesses the 
radio resources in the GSM radio access network 
(communication 9} . 

10 The above described handover procedure can be further 

extended by specifying the preferred radio access system 
indication in the Handover/Relocation Request messages. This 
scenario will be explained with respect to Fig. 2. 

15 In communication 1 in Fig. 2, the RNC of the UMTS RAN which 
the UE is camped on initiates a handover to GSM BSS, for 
example due to coverage reasons, and sends a Relocation 
Required message to the MSC/VLR. The MSC/VLR identifies that 
the service used by the UE or subscriber cannot be provided 

20 with the same QoS (Quality of Service) in GSM. Thus, it 
performs service level downgrading and indicates in the 
Handover Request message to the GSM BSS (communication 2) 
that, when UMTS coverage becomes available, the connection 
should be handed over back to UMTS. 

25 

In communication 3, the GSM BSS sends a Handover Request 
Acknowledge to the MSC/VLR. Subsequently, the MSC/VLR 
transmits a Relocation Command to the UMTS RAN (communication 
4). Upon receiving this command, the UMTS RAN sends an RRC 
30 Inter-System Handover Command to the UE (communication 5) . 
After that, the UE accesses the radio resources in the GSM 
radio access network (communication 6) . 

With respect to Fig. 1, a service based forced inter-system 
35 handover from UMTS to GSM is described. As mentioned above, 
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the handover can be based also on the subscribers identity 
or the subscriber's home network identity. 

In this case, at the Service Request (communication 1 in Fig. 
5 1), the core network (MSC/VLR) analyzes the subscriber's 
identity in order to find out whether the subscriber is 
operator's "own" subscriber or a visiting subscriber. Based 
on the operator specific criteria and based on the analysis 
result, the core network indicates in the Assignment Request 
10 (communication 3 in Fig. 1) that the connection is to be 
handed over to another radio access network type. Thus, a 
similar procedure as shown in Fig. 1 can be used in 
connection with an operator forced inter-system handover 
based on the subscriber's identity. 

15 

This can be further extended by specifying the allowed radio 
access network types as subscriber parameters in the HLR and 
VLR-HLR interface. This allows the operator to control the 
access to different radio access network types at the level 
20 of individual subscribers. 



Furthermore, the triggering of the inter-system handover can 
be based on the location of the subscriber. For example, 
handover can be forced when a subscriber enters or exits a 
25 particular SA (Service Area), LSA (Localized Service Area), 
or geographical area. 

There are basically two ways to specify the required 
functionality. One way is to indicate the location 
30 information and the target radio access network type in the 
Assignment Request message (communication 3 in Fig. 1) and 
the Handover Request message (communication 5 in Fig. 1). 

Alternatively, a new procedure, for example a location based 
35 handover request, is introduced between the core network and 
the radio access network in the Iu- and A-interface, for 
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example, which conveys the required information to the 
serving radio access network. It should be noted, that the 
location based handover request message does not initiate a 
handover procedure. It only provides additional information 
5 for the handover decision algorithm in the radio access 

network. The information specifies when the handover should 
be initiated (location), and where it should be performed 
(the type of target radio access network(s) in preferred 
order) . The benefit of this added functionality is that the 
10 necessary information about the target network does not have 
to be sent at the connection establishment or handover. The 
needed information can be sent at any time during an active 
connection . 

15 The forced handover based on the security level does not 
necessarily require any additional changes to current 
standards. In the simplest scheme the serving core network 
entity, for example MSC/VLR in GSM or SGSN in GPRS, analyzes 
the requested service and makes a decision whether the 

20 currently used security level is acceptable or not. This can 
be further enhanced by specifying a mechanism to convey a set 
of permitted security algorithms from a home domain (HLR 
(Home Location Server) , HSS (Home Subscriber Server) , AAA 
server (Authentication, Authorization and Accounting) to the 

25 serving core network element (i.e. SGSN or MSC/VLR). There 
may be a single set of permitted algorithms or a service 
specific set of permitted algorithms. In GSM/UMTS, this 
information may be sent in MAP (Mobile Application Part) Send 
Identification Info and MAP Send Authentication Info 

30 operations. 

According to the present invention, assignment and handover 
procedures are described which an operator can use to force 
the user to access another type of radio access network than 
35 the one currently used. The criteria used for handover is not 
restricted to those presented as examples above. The 
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principle of the implementation of the present invention in 
the core network is the introduction of a set of tools for an 
operator to control who (subscriber's identity), for what 
(services), where (location) uses a particular type of radio 
5 access network in their network system, for example WLAN, 
UMTS, BRAN, GSM, GERAN, IS-136, WCDMA, etc. That is, a 
flexible handover algorithm can be provided, which behavior 
can be specified by the operator by using a set of 
configurable parameters. For example, in introducing only one 
10 new parameter into the Assignment Request, the operator can 
flexibly control the access to different types of radio 
access networks. 

The present invention is applicable to wireless mobile 
15 communication systems having at least two different types of 
radio access networks attached to the core network. 

While the invention has been described with reference to 
preferred embodiments, the description is illustrative of the 
20 invention and is not to be construed as limiting the 

invention. Various modifications and applications may occur 
to those skilled in the art without departing from the true 
spirit and scope of the invention as defined by the appended 
claims . 
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1- A communication network system comprising at least two 
different types of radio access networks attached to a core 
!3 network, wherein: 

a subscriber communicates via a first radio access 
network with the core network; and 

the core network forces handover of the subscriber to 
another type of radio access network on the basis of operator 
10 specific criteria. 

2. A network system according to claim 1, wherein the core 
network indicates in an assignment request message sent to 
the first radio access network that a handover to the other 

15 type of radio access network is needed. 

3. A network system according to claim 2, wherein the core 
network indicates the first type of radio access network as a 
preferred radio access network in a handover request message 

20 sent to the other radio access network. 

4. A network system according- to claim 1, wherein the 
operator specific criteria comprise a requested service. 

25 5. A network system according to claim 1, wherein the 

operator specific criteria comprise subscriber's identity. 

6. A network system according to claim 5, wherein the core 
network analyzes the subscriber's identity upon receiving a 

30 service request from the first radio access network and 

forces a handover to the other type of radio access network 
on the basis of the analysis result. 

7. A network system according to claim 5, wherein allowed 
35 radio access network types are specified as subscriber 
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parameters in a subscriber database and are transmitted to 
the core network. 

8. A network system according to claim 1, wherein the 

5 operator specific criteria comprise subscriber's location. 

9. A network system according to claim 8, wherein the core 
network indicates location information and a type of target 
radio access network in an assignment request message sent to 

10 the first radio access network. 

10. A network system according to claim 8, wherein the core 
network transmits location information and a type of target 
radio access network to the first radio access network at any 

15 time during an active connection. 

11. A network system according to claim 1, wherein the 
operator specific criteria comprise a required security 
level . 

20 

12. A network system according to claim 11, wherein the core 
network analyzes the required security level of a requested 
service and forces handover on the basis of the analysis 
result . 

25 

13. A network system according to claim 11, wherein a set of 
permitted security algorithms is specified in a subscriber 
database and is transmitted to the core network. 

30 14. A method of handing over a subscriber communicating via a 
first radio access network with a core network to another 
type of radio access network, the radio access networks being 
attached to the core network in a communication network 
system comprising at least two different types of radio 

35 access networks, wherein the handover of the subscriber to 
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the other type of radio access network is forced by the core 
network on the basis of operator specif ic ' criteria . 

15. A method according to claim 14, wherein it is indicated 
5 in an assignment request message sent from the core network 

to the first radio access network that a handover to the 
other type of radio access network is needed. 

16. A method according to claim 15, wherein the first type of 
10 radio access network is indicated as a preferred radio access 

network in a handover request message sent from the core 
network to the other radio access network. 

17. A method according to claim 14, wherein the operator 
15 specific criteria comprise a requested service. 

18. A method according to claim 14, wherein the operator 
specific criteria comprise subscriber's identity. 

20 19. A method according to claim 18, wherein the subscriber's 
identity is analyzed by the core network upon receiving a 
service request from the first radio access network and a 
handover to the other type of radio access network is forced 
on the basis of the analysis result. 

25 

* 

20. A method according to claim 18, wherein allowed radio 

» 

access network types are specified as subscriber parameters 
in a subscriber database and are transmitted to the core 
network. 

30 

21. A method according to claim 14, wherein the operator 
specific criteria comprise subscriber's location. 

22. A method according to claim 21, wherein location 

35 information and a type of target radio access network is 
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request message 
access network. 
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sent from the core 



23. A method according to claim 21, wherein location 
5 information and a type of target radio access network is 
transmitted by the core network to the first radio access 
network at any time during an active connection. 



24. A method according to claim 14, wherein the operator 
0 specific criteria comprise a required security level. 

i 

25. A method according to claim 24, wherein the required 
security level of a requested service is analyzed by the core 
network and a handover is forced on the basis of the analysis 

5 result. 

26. A method according to claim 24, wherein a set of 
permitted security algorithms is specified in a subscriber 
database and is transmitted to the core network. 
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